The UK’s National Cyber Security Centre has joined with the US government Cybersecurity and Infrastructure Security Agency (CISA), FBI and US National Security Agency (NSA) to issue a security advisory about vulnerabilities in Cisco devices: APT28 Exploits Known Vulnerability To Carry Out Reconnaissance and Deploy Malware on Cisco Routers | …
I just love this cyber security story…
This is all just academic research (at the moment) but here is a story about exploiting the range of voice assistants, Siri, Google Assistant, Alexa and Cortana, using voice commands, issued from one device, that are inaudible to the human owners, but can activate another device. To do what? Here …
CISA Security Advisories – and why checking this post and software patching is important
CISA is the US government’s Cybersecurity and Infrastructure Security Agency and a very good source cyber security and software patching information. Last week they posted several software patching updates and known vulnerabilities that are being exploited and mitigations for them. Samba Releases Security Updates for Multiple Versions of Samba | …
Snipping tool data leak fixed
Here is a follow-up to last week’s Microsoft Snipping Tool story about potential data leaks after an image was cropped – a patch! Microsoft pushes OOB security updates for Windows Snipping tool flaw (bleepingcomputer.com) The out-of-band (OOB) patch is available now – if you – or someone in your company …
When redacting does not work
This is not a repeat of the previous post – now the Microsoft Snipping Tool has been shown to have similar issues to Google Pixel’s image cropping tool – what you cut away is not lost and so secret, it can be recovered later. Windows 11 Snipping Tool privacy bug …